,,ii #aagth ,,congress #ast ,session ,s4 #biic ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,october #ai1 #bjba,ms4 ,rosen 7for herself1 ,mr4 ,sasse1 and ,mr4 ,king7 introduced the following bill2 which was read twice and referred to the ,committee on ,homeland ,security and ,governmental ,affairs ,a ,,bill ,to amend the ,homeland ,security ,act of #bjjb to establish in the ,cybersecurity and ,infrastructure ,security ,agency the ,national ,cyber ,exercise ,program1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,,cisa ,cyber ,exercise ,act4 #b4 ,national ,cyber ,exercise ,program 7a7 ,in general ,subtitle ,a of title ,,xxii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fea et seq47 is amended by adding at the end the following new section3 #bbbj;,a4 ,national ,cyber ,exercise ,program 7a7 ,establishment of program 7#a7 ,in general ,there is established in the ,agency the ,national ,cyber ,exercise ,program 7referred to in this section as the ,exercise ,program7 to evaluate the ,national ,cyber ,incident ,response ,plan1 and other related plans and strategies4 7#b7 ,requirements 7,a7 ,in general ,the ,exercise ,program shall be-- 7i7 based on current risk assessments1 including credible threats1 vulnerabilities1 and consequences2 7ii7 designed1 to the extent practicable1 to simulate the partial or complete incapacitation of a government or critical infrastructure network resulting from a cyber incident2 7iii7 designed to provide for the systematic evaluation of cyber readiness and enhance operational understanding of the cyber incident response system and relevant information sharing agreements2 and 7iv7 designed to promptly develop after-action reports and plans that can quickly incorporate lessons learned into future operations4 7,b7 ,model exercise selection ,the ,exercise ,program shall-- 7i7 include a selection of model exercises that government and private entities can readily adapt for use2 and 7ii7 aid such governments and private entities with the design1 implementation1 and evaluation of exercises that-- 7,i7 conform to the requirements described in subparagraph 7,a72 7,,ii7 are consistent with any applicable national1 ,state1 local1 or ,tribal strategy or plan2 and 7,,iii7 provide for systematic evaluation of readiness4 7#c7 ,consultation ,in carrying out the ,exercise ,program1 the ,director may consult with appropriate representatives from ,sector ,risk ,management ,agencies1 the ,office of the ,national ,cyber ,director1 cybersecurity research stakeholders1 and ,sector ,coordinating ,councils4 7b7 ,definitions ,in this section3 7#a7 ,state ,the term ,state means any ,state of the ,united ,states1 the ,district of ,columbia1 the ,commonwealth of ,puerto ,rico1 the ,northern ,mariana ,islands1 the ,united ,states ,virgin ,islands1 ,guam1 ,american ,samoa1 and any other territory or possession of the ,united ,states4 7#b7 ,private entity ,the term private entity has the meaning given such term in section #ajb of the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aeja74 4 7b7 ,technical amendments 7#a7 ,homeland ,security ,act of #bjjb ,subtitle ,a of title ,,xxii of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fea et seq47 is amended-- 7,a7 in the first section #bbae 7#f ,u4,s4,c4 #ffe2 relating to the duties and authorities relating to 4gov internet domain71 by amending the section enumerator and heading to read as follows3 #bbae4 ,duties and authorities relating to 4gov internet domain 2 7,b7 in the second section #bbae 7#f ,u4,s4,c4 #ffe;b2 relating to the joint cyber planning office71 by amending the section enumerator and heading to read as follows3 #bbaf4 ,joint cyber planning office 2 7,c7 in the third section #bbae 7#f ,u4,s4,c4 #ffe;c2 relating to the ,cybersecurity ,state ,coordinator71 by amending the section enumerator and heading to read as follows3 #bbag4 ,cybersecurity ,state ,coordinator 2 7,d7 in the fourth section #bbae 7#f ,u4,s4,c4 #ffe;d2 relating to ,sector ,risk ,management ,agencies71 by amending the section enumerator and heading to read as follows3 #bbah4 ,sector ,risk ,management ,agencies 2 7,e7 in section #bbaf 7#f ,u4,s4,c4 #ffe;e2 relating to the ,cybersecurity ,advisory ,committee71 by amending the section enumerator and heading to read as follows3 #bbai4 ,cybersecurity ,advisory ,committee 2 and 7,f7 in section #bbag 7#f ,u4,s4,c4 #ffe;f2 relating to ,cybersecurity ,education and ,training ,programs71 by amending the section enumerator and heading to read as follows3 #bbbj4 ,cybersecurity ,education and ,training ,programs 4 7#b7 ,consolidated ,appropriations ,act1 #bjba ,paragraph 7#a7 of section #ijd7;b7 of division ,u of the ,consolidated ,appropriations ,act1 #bjba 7,public ,law #aaf-bfj7 is amended1 in the matter preceding subparagraph 7,a71 by inserting of #bjjb after ,homeland ,security ,act4 7c7 ,clerical amendment ,the table of contents in section #a7;b7 of the ,homeland ,security ,act of #bjjb is amended by striking the items relating to sections #bbad through #bbag and inserting the following new items3 ,sec4 #bbad4 ,national ,asset ,database4 ,sec4 #bbae4 ,duties and authorities relating to 4gov internet domain4 ,sec4 #bbaf4 ,joint cyber planning office4 ,sec4 #bbag4 ,cybersecurity ,state ,coordinator4 ,sec4 #bbah4 ,sector ,risk ,management ,agencies4 ,sec4 #bbai4 ,cybersecurity ,advisory ,committee4 ,sec4 #bbbj4 ,cybersecurity ,education and ,training ,programs4 ,sec4 #bbbj;,a4 ,national ,cyber ,exercise ,program4 4